[asterisk-users] alwaysauthreject=yes not working as expected

[CB]

Asterisk 1.4.42

Set alwaysauthreject=yes in [general] section of sip.conf.
Restarted asterisk

However when I attempt to register I still get:
[2012-08-08 21:11:34] NOTICE[15689] chan_sip.c: Registration from
'<sip:0003330822222261336 at domain.com>' failed for '121.98.1.1' - Wrong
password
[2012-08-08 21:12:42] NOTICE[15689] chan_sip.c: Registration from
'<sip:000333082222226133 at domain.com>' failed for '121.98.1.1' - No matching
peer found

Based on the Asterisk security advisory
(http://downloads.asterisk.org/pub/security/AST-2011-011.html) I would have
expected 1.4.42 to respond the same in both cases (since the issue was fixed
in 1.4.41.2). Am I missing something obvious?